Just received an email from HackerOne:

"Starting August 14, 2026, submitting to Bug Bounty Programs (BBPs) on the H1 Platform will require a verified identity. This applies to every account, new and existing, across all bug bounty programs, whether managed or unmanaged."

Yikes.